CVE

Id
4580  
CVE No.
CVE-2002-0188  
Status
Entry  
Description
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22886 4580 CVE-2002-0188 BUGTRAQ:20020516 [SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically  View
22887 4580 CVE-2002-0188 URL:http://archives.neohapsis.com/archives/bugtraq/2002-05/0126.html  View
22888 4580 CVE-2002-0188 MS:MS02-023  View
22889 4580 CVE-2002-0188 URL:http://www.microsoft.com/technet/security/bulletin/ms02-023.asp  View
22890 4580 CVE-2002-0188 MISC:http://www.lac.co.jp/security/english/snsadv_e/48_e.html  View
22891 4580 CVE-2002-0188 XF:ie-content-disposition-variant2(9086)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63712 JVNDB-2002-000039 Microsoft Internet Explorer におけるヘッダ情報を偽装したファイルにより任意のコードを実行される脆弱性 ------------ CVE-2002-0188 4580 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000039.html  View